Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
File: avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json)
Hash identifier: qB5Lh/kJsKMSyXEkThyor4m3PwSEGVE351cf/yRLws0=
Subject key identifier: A9:23:B2:3E:A2:97:4F:90:2C:5A:AC:F3:03:B5:3C:31:67:49:84:A5
Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
Certificate issuer: /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
Manifest number: 17
Signing time: Sat 29 Mar 2025 07:18:40 +0000
Manifest this update: Sat 29 Mar 2025 07:18:39 +0000
Manifest next update: Sat 05 Apr 2025 07:18:39 +0000
Files and hashes: 1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: 4ZduPdXFT1QseBJkRAY4cUR8FRyH6rGJ5CtrkIazLMM=)
2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: T5Wgkj7Jey0q2NjRJOZOXnxQU2Gepdp5k2oYU5bG3oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164B02
Validity
Not Before: Mar 29 07:18:39 2025 GMT
Not After : Apr 5 07:18:39 2025 GMT
Subject: CN=67e79ecf-eb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:16:2d:90:91:4b:d8:52:50:03:4b:cb:d3:
46:6c:84:53:98:68:53:65:c1:52:ac:e4:3d:89:5e:
eb:17:ac:e4:74:e4:c6:9c:bd:da:9a:9c:68:15:aa:
dc:68:7a:72:08:ea:50:7b:d5:24:53:58:4f:34:20:
ef:99:cb:60:8a:e1:aa:20:81:9f:a6:5a:f6:d4:ad:
f8:e9:6d:fe:a0:96:bc:68:62:4a:31:5e:78:ee:69:
66:a9:e2:43:5a:f4:f2:1e:f9:89:56:15:6f:ad:e6:
1b:e2:7c:75:28:ed:f7:b4:9c:c9:cc:83:b2:f4:33:
5d:df:2d:dd:e2:f3:a9:e9:e9:09:5d:30:da:78:12:
be:96:0f:38:0a:82:7e:b0:01:9d:8d:66:09:8f:05:
7f:e3:7e:25:49:b3:8b:95:8a:24:c5:df:09:f5:58:
42:32:21:25:b7:1b:56:13:d0:02:24:97:b2:da:b1:
24:6f:2f:5f:66:25:bc:b2:14:76:73:19:96:b0:7b:
02:1f:25:01:7c:ff:e4:51:93:e1:ca:ea:9b:f5:1c:
87:2c:92:e8:a8:9c:21:9f:f1:7b:64:f2:d6:09:9a:
65:f3:e7:bc:6e:c8:78:a3:d5:ff:61:d9:da:0f:de:
8c:81:53:d9:d8:84:28:07:e5:18:28:7e:77:31:2e:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:23:B2:3E:A2:97:4F:90:2C:5A:AC:F3:03:B5:3C:31:67:49:84:A5
X509v3 Authority Key Identifier:
keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:dd:a5:45:c8:d4:78:f5:5d:ec:f9:76:54:80:18:53:2a:e4:
0d:32:3f:36:0a:6e:a7:b0:82:2e:bd:36:7e:c1:84:ba:aa:b7:
be:80:9e:95:75:a5:4d:db:e9:80:9d:60:2a:ec:eb:5d:47:d5:
4c:21:17:36:4b:b6:aa:a7:2d:c2:46:ff:55:5c:5c:03:82:a9:
53:39:d9:78:e6:df:e8:56:1f:f0:99:37:c6:7c:bf:85:17:4c:
f6:53:ef:4b:a6:ec:ed:3d:a3:13:08:ed:d0:25:21:e4:ee:5b:
64:38:aa:04:b7:6a:13:09:09:bd:ed:09:68:19:df:74:3e:bb:
86:43:3d:49:0c:4c:3b:ed:a1:d5:a0:ed:79:fa:7a:c3:9c:a4:
00:4d:40:5e:0a:cf:c3:b4:88:5d:f3:27:79:5c:2a:1a:7e:77:
40:20:fb:75:da:7e:a7:3a:0a:b3:35:d4:f2:0c:98:0b:01:e0:
11:45:bd:40:32:11:f5:17:4a:e0:d9:90:5b:3f:3b:a6:57:49:
42:b9:d6:e8:15:ab:3a:15:2f:c3:21:ea:45:13:09:41:eb:db:
55:af:11:14:5f:a8:d9:ce:03:c1:8e:51:28:93:f3:de:72:2a:
d2:75:46:2c:e1:9c:20:40:ed:d9:a2:39:51:3d:ae:f1:b6:ab:
46:74:50:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NEIwMjExMC8GA1UEBRMoNkFGODNEMTcyNTBFMTZFQzM4NzZFNTY3QUUzRTFEQUI4
MzI1MUMwNjAeFw0yNTAzMjkwNzE4MzlaFw0yNTA0MDUwNzE4MzlaMBgxFjAUBgNV
BAMTDTY3ZTc5ZWNmLWViODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuphYtkJFL2FJQA0vL00ZshFOYaFNlwVKs5D2JXusXrOR05MacvdqanGgVqtxo
enII6lB71SRTWE80IO+Zy2CK4aoggZ+mWvbUrfjpbf6glrxoYkoxXnjuaWap4kNa
9PIe+YlWFW+t5hvifHUo7fe0nMnMg7L0M13fLd3i86np6QldMNp4Er6WDzgKgn6w
AZ2NZgmPBX/jfiVJs4uViiTF3wn1WEIyISW3G1YT0AIkl7LasSRvL19mJbyyFHZz
GZawewIfJQF8/+RRk+HK6pv1HIcskuionCGf8Xtk8tYJmmXz57xuyHij1f9h2doP
3oyBU9nYhCgH5RgofncxLkaFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqSOyPqKX
T5AsWqzzA7U8MWdJhKUwHwYDVR0jBBgwFoAUavg9FyUOFuw4duVnrj4dq4MlHAYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0QjAyLzk5QjNBRDg4RUUx
RjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3NGR1Vm5yajRkcTRNbEhB
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYXZnOUZ5VU9GdXc0ZHVWbnJqNGRxNE1sSEFZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
QjAyLzk5QjNBRDg4RUUxRjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3
NGR1Vm5yajRkcTRNbEhBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADDdpUXI1Hj1Xez5dlSAGFMq5A0yPzYKbqewgi69Nn7BhLqqt76AnpV1
pU3b6YCdYCrs611H1UwhFzZLtqqnLcJG/1VcXAOCqVM52Xjm3+hWH/CZN8Z8v4UX
TPZT70um7O09oxMI7dAlIeTuW2Q4qgS3ahMJCb3tCWgZ33Q+u4ZDPUkMTDvtodWg
7Xn6esOcpABNQF4Kz8O0iF3zJ3lcKhp+d0Ag+3Xafqc6CrM11PIMmAsB4BFFvUAy
EfUXSuDZkFs/O6ZXSUK51ugVqzoVL8Mh6kUTCUHr21WvERRfqNnOA8GOUSiT895y
KtJ1RizhnCBA7dmiOVE9rvG2q0Z0UE8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:45:32 2025 by rpki-client